Lucene search

[email protected]CVE-2020-15791

HistorySep 09, 2020 - 7:15 p.m.

CVE-2020-15791

2020-09-0919:15:20

CWE-522

[email protected]

web.nvd.nist.gov

cve-2020-15791

nvd

simatic

s7-300

s7-400

sinumerik

plc

authentication protocol

network security

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and a PLC via port 102/tcp (ISO-TSAP) insufficiently protects the transmitted password. This could allow an attacker that is able to intercept the network traffic to obtain valid PLC credentials.

Affected configurations

NVD

Node

siemenssimatic_s7-300_cpu_312Match-

AND

siemenssimatic_s7-300_cpu_312_firmware

Node

siemenssimatic_s7-300_cpu_314Match-

AND

siemenssimatic_s7-300_cpu_314_firmware

Node

siemenssimatic_s7-300_cpu_315-2_dpMatch-

AND

siemenssimatic_s7-300_cpu_315-2_dp_firmware

Node

siemenssimatic_s7-300_cpu_315-2_pnMatch-

AND

siemenssimatic_s7-300_cpu_315-2_pn_firmware

Node

siemenssimatic_s7-300_cpu_317-2_pnMatch-

AND

siemenssimatic_s7-300_cpu_317-2_pn_firmware

Node

siemenssimatic_s7-300_cpu_317-2_dpMatch-

AND

siemenssimatic_s7-300_cpu_317-2_dp_firmware

Node

siemenssimatic_s7-300_cpu_315f-2_dpMatch-

AND

siemenssimatic_s7-300_cpu_315f-2_dp_firmware

Node

siemenssimatic_s7-300_cpu_315f-2_pnMatch-

AND

siemenssimatic_s7-300_cpu_315f-2_pn_firmware

Node

siemenssimatic_s7-300_cpu_317f-2_pn_firmware

AND

siemenssimatic_s7-300_cpu_317f-2_pnMatch-

Node

siemenssimatic_s7-300_cpu_317f-2_dp_firmware

AND

siemenssimatic_s7-300_cpu_317f-2_dpMatch-

Node

siemenssimatic_s7-400_cpu_412_firmware

AND

siemenssimatic_s7-400_cpu_412Match-

Node

siemenssimatic_s7-400_cpu_414_firmware

AND

siemenssimatic_s7-400_cpu_414Match-

Node

siemenssimatic_s7-400_cpu_416_firmware

AND

siemenssimatic_s7-400_cpu_416Match-

Node

siemenssimatic_s7-400_cpu_417_firmware

AND

siemenssimatic_s7-400_cpu_417Match-

CPENameOperatorVersion
siemens:simatic_s7-300_cpu_312_firmwaresiemens simatic s7-300 cpu 312 firmwareeq*

CPE	Name	Operator	Version
siemens:simatic_s7-300_cpu_312_firmware	siemens simatic s7-300 cpu 312 firmware	eq	*

CNA Affected

[
  {
    "product": "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC S7-400 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC WinAC RTX (F) 2010",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINUMERIK 840D sl",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-381684.pdf

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

Related for CVE-2020-15791

nessus2 prion1 ics1 cvelist1 nvd1